10

1. What will happen when upgrading Ubuntu 17.10 with encrypted /home to Ubuntu 18.04?

Bionic Beaver Release Notes

Other base system changes since 16.04 LTS:

The installer no longer offers the encrypted home option using ecryptfs-utils. It is recommended to use full-disk encryption instead for this release. Launchpad Bug #1756840

2. Will 18.04 be able to use encrypted (ecryptfs) /home ?

edit: 3 is now a standalone Question

  • By fscrypt do you mean ecryptfs? Upgrading to 18.04 shouldn't disable/remove encrypted home. – dobey Apr 13 '18 at 17:59
  • Backup at least all data, that you cannot afford to lose, before you start upgrading to a new version. – sudodus Apr 13 '18 at 18:31
  • On questions 1 and 2: I have upgraded from 17.10 to 18.04 with ecryptfs home dirs and there was no problem. On question 3: fscrypt is in the repository, but I have no experience with this. – Martin W Apr 13 '18 at 18:33
  • 1
    See also this answer. – Redsandro May 3 '18 at 11:20
  • You might want to read my response at: askubuntu.com/questions/1029249/… – Mr. Cypherpunk May 9 '18 at 2:38
10

I did a trial install of 18.04 Beta Lubuntu on a system with an encrypted home. This system has separate / and /home partitions, so I was doing a "Something Else" install, formatting and installing to /, and not touching /home.

Every other time I've done this (with older versions of the installer) on the screen where you put in your username, at the bottom 3 options appeared, one of which was "encrypt your home directory" or words to that effect. This option was always ticked and grayed out (because the installer knew that the home directory was encrypted). This didn't happen this install - the option was not offered at all- and when the install was complete, I couldn't log in.

To fix this, I had to reboot, switch to a terminal login (Ctrl+Alt+F1), and install ecryptfs-utils. Another reboot and I could log in.

There was another user on the same PC with a different encrypted home. I could never manage to log in that account. I finally deleted the user, re-added them with encrypted home, and reloaded their home directory from backup.

This was all quite a hassle and I probably won't be encrypting home directories any more.

  • +1. Thanks for this detailed description :-) – sudodus Apr 13 '18 at 18:46
  • Great news, glad to hear it. – Organic Marble Sep 13 '18 at 4:01
1

It is not offered as a default option. It is still supported, and ecryptfs is available. You can't set it up during normal install.

It will be possible to use old /home folders encrypted with ecryptfs, and you can manually create new.

As always, a good backup is recommended, especially when upgrading a system..

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.